Posadis DNS Request Question Section Denial Of Service Vulnerability

Bugtraq ID:	6799
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 05 2003 12:00AM
Updated:	Feb 05 2003 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Posadis Posadis 0.50.8 Posadis Posadis 0.50.7 Posadis Posadis 0.50.6 Posadis Posadis 0.50.5 Posadis Posadis 0.50.4
Not Vulnerable:	Posadis Posadis 0.50.9 Posadis Posadis m5pre2 Posadis Posadis m5pre1

Posadis DNS Request Question Section Denial Of Service Vulnerability

A denial of service vulnerability has been reported for Posadis. The vulnerability exists due to the way the DNS server reads certain DNS queries.

An attacker can exploit this vulnerability by sending a malformed DNS query to a Posadis server. When Posadis attempts to parse the request, it will fail and cause the server to crash.

Posadis DNS Request Question Section Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Posadis DNS Request Question Section Denial Of Service Vulnerability

Solution:
The following fixes are available:


Posadis Posadis 0.50.4

• Posadis posadis-0.50.9.exe
  http://prdownloads.sf.net/posadis/posadis-0.50.9.exe


• Posadis posadis-0.50.9.tar.gz
  http://prdownloads.sf.net/posadis/posadis-0.50.9.tar.gz

Posadis Posadis 0.50.5

• Posadis posadis-0.50.9.exe
  http://prdownloads.sf.net/posadis/posadis-0.50.9.exe


• Posadis posadis-0.50.9.tar.gz
  http://prdownloads.sf.net/posadis/posadis-0.50.9.tar.gz

Posadis Posadis 0.50.6

• Posadis posadis-0.50.9.exe
  http://prdownloads.sf.net/posadis/posadis-0.50.9.exe


• Posadis posadis-0.50.9.tar.gz
  http://prdownloads.sf.net/posadis/posadis-0.50.9.tar.gz

Posadis Posadis 0.50.7

• Posadis posadis-0.50.9.exe
  http://prdownloads.sf.net/posadis/posadis-0.50.9.exe


• Posadis posadis-0.50.9.tar.gz
  http://prdownloads.sf.net/posadis/posadis-0.50.9.tar.gz

Posadis Posadis 0.50.8

• Posadis posadis-0.50.9.exe
  http://prdownloads.sf.net/posadis/posadis-0.50.9.exe


• Posadis posadis-0.50.9.tar.gz
  http://prdownloads.sf.net/posadis/posadis-0.50.9.tar.gz

Posadis DNS Request Question Section Denial Of Service Vulnerability

References:

• Posadis Homepage (Posadis)
  
• Remote vulnerability in Posadis 0.50.x (Posadis)